Security Researcher @starlabs_sg
Indonesia
Joined July 2016
- Tweets1.8K
- Following808
- Followers1.9K
- Likes6.3K
Had some fun finding and exploiting state machine logic bug in af_alg_sendmsg last year, it leads to OOB access, arbitrary write then container escape that unnoticed since 2011
kernelCTF writeup: github.com/star-sg/security-…
Fix commit: git.kernel.org/pub/scm/linux…
We're likely 1st to publicly exploit crypto: af_alg as a new attack surface in kernelCTF. Our members @n0psledbyte & @st424204 started poking it in Sep 2025, finding a 0-day container escape unnoticed since 2011. @AnthropicAI @OpenAI: interested in collaborations? We are all ears
Ramdhan retweeted
After 6 months of responsible disclosure, proud to announce our team discovered 13 (mostly exploitable) vulnerabilities in Samsung Exynos processors! Kudos to @st424204, @n0psledbyte, @Peterpan980927 & @rainbowpigeon_
CVE-2025-23095 to CVE-2025-23107
📍 semiconductor.samsung.com/su…
Ramdhan retweeted
Big shoutout to @hi_im_d4rkn3ss & @gerrard_tai for flying over & represent us
To our 1st-timers Gerrard @cplearns2h4ck @MochiNishimiya for the awesome work
To @n0psledbyte & @st424204 for guiding the next gen & @_piers2 @bruce30262 who are part of it
Lets continue trying #Pwn2Own
Ramdhan retweeted
Nicely done! Billy (@st424204) and Ramdhan (@n0psledbyte) of STAR Labs used a UAF to perform their Docker Desktop escape and execute code on the underlying OS. They earn $60,000 and 6 Master of Pwn Points.
Ramdhan retweeted
After a dramatic pause in getting things setup Billy(@st424204) and Ramdhan(@n0psledbyte) of STAR Labs preformed a Docker Desktop escape to pop calc - and they are also now off to the disclosure room - good luck! #Pwn2Own #P2OBerlin
Ramdhan retweeted
We look forward to meeting everyone (both speakers and attendees). 🥳
Last 7 DAYS LEFT to submit to our Off-By-One 2025 CFP!
Got something exciting to share? Now’s your chance to speak at the conference.
⏰ Time is ticking!
offbyone.sg/cfp
Let’s make this unforgettable!
#OBO2025 #Singapore
Ramdhan retweeted
Seems like the Docker Escape (CVE-2024-6222) that our team members, @st424204 ,@n0psledbyte & @tuanit96
presented at Pwn2Own is finally fixed. Great work. 👍🏼💪🏼
docs.docker.com/desktop/rele…
Ramdhan retweeted
Exciting news! 🚀 Just dropped my blogpost unveiling the universal Linux kernel LPE PoC for CVE-2024-1086 (working on v5.14 - v6.7) used for pwning Debian, Ubuntu, and KernelCTF Mitigation instances, including novel techniques like Dirty Pagedirectory 🧵
pwning.tech/nftables
Ramdhan retweeted
Our researchers @st424204 & @tuanit96 & @n0psledbyte are also successful in their LPE attempt in Ubuntu at #Pwn2Own Vancouver 2024, 🥳🥳👍🏼
Collision - STAR Labs SG successfully demonstrated their LPE on #Ubuntu desktop. However, they used a bug that was previously reported. They still earn $5,000 and 1 Master of Pwn point.
Ramdhan retweeted
Verified! The first #Docker escape at #Pwn2Own involved two bugs, including a UAF. The team from STAR Labs SG did great work in the demonstration and earned $60,000 and 6 Master of Pwn points. #P2OVancouver
Ramdhan retweeted
During the 2nd day of #Pwn2Own Vancouver 2024,
our researchers @st424204 & @tuanit96 & @n0psledbyte successfully demonstrated their Docker Escape. 🥳🥳👍🏼
Verified! The first #Docker escape at #Pwn2Own involved two bugs, including a UAF. The team from STAR Labs SG did great work in the demonstration and earned $60,000 and 6 Master of Pwn points. #P2OVancouver
Ramdhan retweeted
We are organising a conference on 26th - 27th June 2024
Attention Speakers: Our 2024 Call for Papers is now open! #OffByOne2024? Learn all about it:
offbyone.sg/cfp/
Ramdhan retweeted
Excellent blog posts by @sam4k1 introducing Linux kernel memory management: buddy (page) allocator and slab (SLUB) allocator
buff.ly/3Ofs5kR
buff.ly/3EqeXpu
#Linux #kernel #cybersecurity #0xor0ne
Ramdhan retweeted
So far I've written 559 pages to help the security community:
1. exploitreversing.com/2021/12…
2. exploitreversing.com/2022/02…
3. exploitreversing.com/2022/05…
4. exploitreversing.com/2022/05…
5. exploitreversing.com/2022/09…
6. exploitreversing.com/2022/11…
7. exploitreversing.com/2023/01…
8. exploitreversing.com/2023/04…
Ramdhan retweeted
2024 is the year of the decompiler! Start your year off right by reading a post on the last 30 years of decompilation and one of its hardest problems: structuring! mahaloz.re/dec-history-pt1
Part 2 to be released next week.
Ramdhan retweeted
I wasted my afternoon writing an introduction to the Hiew hex editor😆
lock.cmpxchg8b.com/hiew.html
Ramdhan retweeted
Operation Triangulation: The last (hardware) mystery securelist.com/operation-tri…
Ramdhan retweeted
during reverse engineering, whenever i see some unknown instruction the first place i go to is this page:
felixcloutier.com/x86/index.…
you can click on each instruction and see their psuedocode, this helps you to understand what are the steps that this instructions takes which are not obvious
like how ret instructions pops the stack pointer into eip.
Ramdhan retweeted
Reminder to go ask the questions that you feel are stupid.
Just fixed a problem I was stuck on for 2 days in 15 minutes because I asked all my dumb questions.
